<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">
<meta charset="utf-8">
Not Found<br>
The requested URL /entities was not found on this server.<br>
<br>
:P<br>
<br>
Tried to set a very strange entityID on my side:
<meta charset="utf-8">
<a class="moz-txt-link-freetext" href="https://localhost/asdf2gbhjkl/sprovide.xml">https://localhost/asdf2gbhjkl/sprovide.xml</a><br>
But I still get the same error, so it's probably not an entityID
collision :(<br>
<br>
Il 05/10/15 18:37, Kevin Foote ha scritto:<br>
</div>
<blockquote
cite="mid:8507BF81-BAFC-4100-AE18-412FE5BA16F9@uoregon.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div>Most likely your entiyID is not unique.</div>
<div id="AppleMailSignature">Check the <a moz-do-not-send="true"
href="http://testshib.org/entities">testshib.org/entities</a>
page to make sure<br>
<br>
- sent from mobile</div>
<div><br>
On Oct 5, 2015, at 12:33 PM, Alessandro Molina <<a
moz-do-not-send="true"
href="mailto:alessandro.molina@axant.it"><a class="moz-txt-link-abbreviated" href="mailto:alessandro.molina@axant.it">alessandro.molina@axant.it</a></a>>
wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>I'm currently trying to check a ServiceProvider
configuration against <a moz-do-not-send="true"
href="http://testshib.org">
testshib.org</a> (using <a moz-do-not-send="true"
href="http://testshib.org">testshib.org</a> as an IdP),<br>
but <a moz-do-not-send="true" href="http://testshib.org">testshib.org</a>
si currently failing with the following traceback:<br>
<br>
12:07:04.650 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:927]
- Could not resolve a key encryption credential for peer
entity:
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://localhost/sprovide.xml">https://localhost/sprovide.xml</a><br>
12:07:04.651 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:289]
- Unable to construct encrypter<br>
org.opensaml.xml.security.SecurityException: Could not resolve
key encryption credential<br>
at
edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.getEncrypter(AbstractSAML2ProfileHandler.java:928)
~[shibboleth-identityprovider-2.4.0.jar:na]<br>
at
edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildResponse(AbstractSAML2ProfileHandler.java:286)
~[shibboleth-identityprovider-2.4.0.jar:na]<br>
<br>
I'm able to get to the login page and login with the
myself-myself user, but then that traceback is produced when
trying to send back the answer to my application.<br>
Here is the service provider .xml file uploaded to <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.testshib.org/register.html">
<a class="moz-txt-link-freetext" href="http://www.testshib.org/register.html">http://www.testshib.org/register.html</a></a><br>
<br>
<?xml version='1.0' encoding='UTF-8'?><br>
<ns0:EntityDescriptor
xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs=<a
moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/XMLSchema"><a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema">"http://www.w3.org/2001/XMLSchema"</a></a><br>
xmlns:ns1="urn:oasis:names:tc:SAML:metadata:attribute"<br>
xmlns:ns2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns4=<a
moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2000/09/xmldsig#"><a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a></a><br>
xmlns:xsi=<a moz-do-not-send="true"
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
entityID=<a moz-do-not-send="true"
class="moz-txt-link-rfc2396E"
href="https://localhost/sprovide.xml">"https://localhost/sprovide.xml"</a>><br>
<ns0:Extensions><br>
<ns1:EntityAttributes><br>
<ns2:Attribute Name=<a moz-do-not-send="true"
class="moz-txt-link-rfc2396E"
href="http://macedir.org/entity-category">"http://macedir.org/entity-category"</a><br>
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br>
<ns2:AttributeValue
xsi:type="xs:string"><a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.geant.net/uri/dataprotection-code-of-conduct/v1">http://www.geant.net/uri/dataprotection-code-of-conduct/v1</a><br>
</ns2:AttributeValue><br>
</ns2:Attribute><br>
</ns1:EntityAttributes><br>
</ns0:Extensions><br>
<ns0:SPSSODescriptor AuthnRequestsSigned="false"
WantAssertionsSigned="true"<br>
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><br>
<ns0:KeyDescriptor use="signing"><br>
<ns4:KeyInfo><br>
<ns4:X509Data><br>
<ns4:X509Certificate>MIIC7zCCAdegAwIBAgIJAKNUFVpcL0KLMA0GCSqGSIb3DQEBBQUAMBIxEDAOBgNV<br>
BAMTB0xQdWxzYXIwHhcNMTUxMDA1MTYwNTAyWhcNMjUxMDAyMTYwNTAyWjASMRAw<br>
DgYDVQQDEwdMUHVsc2FyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA<br>
04Dvyk0OAmkcjFIzptAJyluGcfP8WsmdE01XOvIV0bi40Cc1c3SCfdXM+AU7kiz6<br>
Ew37m9kXz1FbIw9n9Zsv3ImJ7lqQ1/ZKUkzB/Aj49p85XsoqMwtRq8Zwun9sLAME<br>
+sjWh4+OyQH2Dr/Na7WnafuuYeIl72rFAoUg2IDEodZ5b204suKp1qi0GQwYm2Jp<br>
Ahh0f46RhXawcYVmTMPUS6XQjJ+WH95sDxxxV6Yjfw7d3uZNQ+cNAec7hFxSSAka<br>
nShkimm6KfC5x04jgjz1YA4iNXPoj2Pi2E0l3EBl16qBmhjXoppagriHfN+xIxcD<br>
hEggCSaYLui2Qm/8maeqQwIDAQABo0gwRjAlBgNVHREEHjAcggdMUHVsc2FyhhFo<br>
dHRwczovL2xvY2FsaG9zdDAdBgNVHQ4EFgQUQbbmEqIJlFT8GRdSPE56N+dGZi8w<br>
DQYJKoZIhvcNAQEFBQADggEBAC8jKuZWkHx/AhM1GL2vHq/h9SxHoHFcyYDipVyC<br>
Ql5VB5PjTaLdQ9RZCtJhlJa75DeVfW6hncDY5Q2phb7MwH2GfWm/bZwmPyfwsEeI<br>
uzOcfyWU24582ITtWBNGkaxkE3uI5cDRvmKfO6fTrAdvw+emtVzYOUcAxzqz0PAQ<br>
B5f2jLbg2sTLB6d4KawGPoq3JtVXPgagIANZ5IsR/dem3FIsZFj8nsztibFFTH/O<br>
ljUAfZledVW5KIfApmHMc4qLvAuSSOSmax6ksBjPE4LVZx/9iftHQOMsucW1O4Ob<br>
ykh4ttyYdRoNP1es5xuzTF3Qw2XRMK1N4ZgFsOQudlEexik=<br>
</ns4:X509Certificate><br>
</ns4:X509Data><br>
</ns4:KeyInfo><br>
</ns0:KeyDescriptor><br>
<ns0:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"<br>
Location=<a
moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="https://localhost/slo/redirect"><a class="moz-txt-link-rfc2396E" href="https://localhost/slo/redirect">"https://localhost/slo/redirect"</a></a>/><br>
<ns0:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Location=<a
moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="https://localhost/slo/post"><a class="moz-txt-link-rfc2396E" href="https://localhost/slo/post">"https://localhost/slo/post"</a></a>/><br>
<ns0:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Location=<a
moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="https://localhost/acs/post"><a class="moz-txt-link-rfc2396E" href="https://localhost/acs/post">"https://localhost/acs/post"</a></a>
index="1"/><br>
</ns0:SPSSODescriptor><br>
</ns0:EntityDescriptor><br>
<br>
We are currently using PySAML2 which has also generated the
previous XML.<br>
It something wrong that I'm missing? The whole <a
moz-do-not-send="true" href="http://testshib.org">testshib.org</a>
traceback is attached to the email<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Alessandro Molina
Chief Technical Officer & Director of Operations
Axant s.n.c. - <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.axant.it">http://www.axant.it</a>
Phone: +39 346 739 9923
Fax: +39 011 412 1756</pre>
</div>
</blockquote>
<blockquote type="cite">
<div><traceback.txt></div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>To unsubscribe from this list send an email to <a
moz-do-not-send="true"
href="mailto:users-unsubscribe@shibboleth.net">
<a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></a></span></div>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Alessandro Molina
Chief Technical Officer & Director of Operations
Axant s.n.c. - <a class="moz-txt-link-freetext" href="http://www.axant.it">http://www.axant.it</a>
Phone: +39 346 739 9923
Fax: +39 011 412 1756</pre>
</body>
</html>